Gitcolombo – Extract And Analyze Contributors Info From Git Repos

OSINT tool to extract info about persons from git repositories: common names, emails, matches between different (as it may seems) accounts.

Using

1. Install git

2. Run:

   <div class="snippet-clipboard-content position-relative overflow-auto" data-snippet-clipboard-copy-content=" # from any git url ./gitcolombo.py -u https://github.com/Kalanchyovskaia16/newlps # from directory, recursively ./gitcolombo.py -d ./newlps -r # from all GitHub personal/org repos by nickname ./gitcolombo.py –nickname LubyRuffy”>

    # from any git url
   ./gitcolombo.py -u https://github.com/Kalanchyovskaia16/newlps
   # from directory, recursively
   ./gitcolombo.py -d ./newlps -r
   # from all GitHub personal/org repos by nickname
   ./gitcolombo.py --nickname LubyRuffy
   

For batch cloning from Gitlab and Bitbucket group repos you can use ghorg.

Output:

• verbose persons info

  • name
  • email
  • number of appearences as author/committer
  • other persons that person can be

• emails used for the same name

• different names for the same person

• general statistics

Details

[RUS] https://telegra.ph/Gitcolombo—OSINT-v-GitHub-03-02

What’s the difference between git author and committer?

TL;DR

• author wrote the code (make the patch)
• commiter commit it to the repo (rewrite history, make pull/merge requests…)

Nice explanation: https://stackoverflow.com/questions/18750808/difference-between-author-and-committer-in-git

Very often developers make inaccurate commits with the one name/email (e.g. work account), then change to the right (e.g. personal account) and make git commit --amend, but forget to change the author of the commit. This way we can use it for OSINT as match of names/emails from git history.

TODO

Source : KitPloit – PenTest Tools!